(Delphi DLL) Get the Certificate with Private Key from a Java KeyStore

See more Java KeyStore (JKS) Examples

Load a Chilkat certificate object from a Java KeyStore.

Chilkat for Delphi Downloads Chilkat non-ActiveX DLL for Delphi Chilkat ActiveX DLL for Delphi * The examples here use the non-ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, JavaKeyStore, CertChain, Cert, Crypt2;

...

procedure TForm1.Button1Click(Sender: TObject);
var
jks: HCkJavaKeyStore;
password: PWideChar;
success: Boolean;
chain: HCkCertChain;
cert: HCkCert;
crypt: HCkCrypt2;

begin
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Most of the time a .jks contains one certificate with it's associated private key.
// (Similar to how a .pfx/.p12 usually contains a particular certificate with private key.)
// This example demonstrates how to get the certificate with private key such that it can be used
// by other Chilkat classes wherever a cert w/ private key is needed.
jks := CkJavaKeyStore_Create();
password := 'secret';
success := CkJavaKeyStore_LoadFile(jks,password,'qa_data/jks/test_secret.jks');
if (success <> True) then
  begin
    Memo1.Lines.Add(CkJavaKeyStore__lastErrorText(jks));
    Exit;
  end;

// Make sure we have a private key.
if (CkJavaKeyStore_getNumPrivateKeys(jks) < 1) then
  begin
    Memo1.Lines.Add('No private key available.');
    Exit;
  end;

// -------------------------------------------------------------------------
// Get the certificate chain associated with the 1st (and probably only) private key in the JKS.
chain := CkJavaKeyStore_GetCertChain(jks,0);
if (CkJavaKeyStore_getLastMethodSuccess(jks) <> True) then
  begin
    Memo1.Lines.Add(CkJavaKeyStore__lastErrorText(jks));
    Exit;
  end;

cert := CkCertChain_GetCert(chain,0);
if (CkCertChain_getLastMethodSuccess(chain) <> True) then
  begin
    Memo1.Lines.Add(CkCertChain__lastErrorText(chain));
    CkCertChain_Dispose(chain);
    Exit;
  end;
CkCertChain_Dispose(chain);

// Verify again that this cert has a private key.
if (CkCert_HasPrivateKey(cert) <> True) then
  begin
    Memo1.Lines.Add('Certificate has no associated private key.');
    CkCert_Dispose(cert);
    Exit;
  end;

// We now have the cert object with it's associated private key, and it can be used in other Chilkat classes where needed.
// For example..

crypt := CkCrypt2_Create();
success := CkCrypt2_SetSigningCert(crypt,cert);
if (success = False) then
  begin
    Memo1.Lines.Add(CkCrypt2__lastErrorText(crypt));
    Exit;
  end;

// ...
// ...

CkCert_Dispose(cert);

CkJavaKeyStore_Dispose(jks);
CkCrypt2_Dispose(crypt);

end;